Mobile phones unable to connect after enabling management protection

RouterOS Beginner Basics
1

Hi all,

I have been experiencing wireless deauth attacks. I have a RB751g-2hnd router running router OS 6.39.1. I have a mix of wired and wireless clients. This setup is in a home environment. I enabled management protection and the iPhone can see the SSID but cannot connect. I am pasting the export of my wireless settings below. Can I adjust the router such that I get deauth protection and can connect my mobile phones to it? I own an iPhone SE and a moto g4-play.

may/24/2017 21:57:39 by RouterOS 6.39.1

software id = 7S88-QHXW

/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no distance=indoors
frequency=auto hw-protection-mode=rts-cts mode=ap-bridge ssid=Periscope
wireless-protocol=802.11
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk management-protection=
required mode=dynamic-keys supplicant-identity=MikroTik
wpa2-pre-shared-key=“some value”
Pranav

2

Hi.

Remember management-protection feature is a proprietary security for MikroTik device. It means, if you mark as required only MikroTik device with the same management-protection key will connect.

3

Hi Gustavo,

Thanks for the clarification. What can I do? I want to prevent deauth attacks but setting management protection is making my wireless network useless. Is there any other way?

Pranav

4

Does it a wifi network in a office?. What is the main propose?
You can secure your network
Using 802.1x authentication
Adding access-list for your MAC clients.

Prevent deauth attacks is a complex wifi problem,
https://www.cwnp.com/hacking-solutions-802-11-protocol-attacks-deauthentication/

5

Hi,
This is a home network. I do not run any servers on it. I do have one access point connected to the router via a cable.

6

I am curious, do you have deauth attacks in a your home network?.

Maybe you can decrease your power level to have less attacks

7

<snip I am curious, do you have deauth attacks in a your home network?.
PL] Yes. I am happy to decrease the power levels. Where do I do this from if I am using the terminal?

8

You can use this

interface wireless set tx-power=10 wlan1

where “wlan1” is your interface wireless name and “10” is your tx-power level you want. If you have few walls you can have signal with low level power